Extracted

• • Target

    JaffaCakes118_6b7bc9ffaae56e6b6ff9fe96099a2430

  • Size

    116KB

  • MD5

    6b7bc9ffaae56e6b6ff9fe96099a2430

  • SHA1

    33b11ccf0c375d95cba0436c7b53d4a76b5d31fd

  • SHA256

    5b930cd21c1defeda5dbfd4ec25feb864287cb4c958eb9d058ad8041e39b63cc

  • SHA512

    4feadccd93f5aa91b4f09564e26f700a1706b27d8b8522b878faa696b35fd01065dfe9c9cbe964c2387662cbac54137cc5fbc2c50cc09228bfc6e6985e391c4b

  • SSDEEP

    1536:a8uVDngAOVU9gSPPSdeV5UQfd0vYxujuwtzOGCq2iW7z:S4U9gSLV5UQfavUQiGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2